Exam 312-50v11 topic 1 question 58 discussion

According CEH AI-matt walker book: page 377 --> firewall has two or more interfaces, it is referred to as multi-homed. Guess the answer should be 2.

Agree, i would say 2 is the minimum "What is a multihomed firewall? A multi-homed firewall is a firewall device or host system that has two or more network interfaces. One interface is connected to the untrusted network and another interface is connected to the trusted network. A DMZ can be added to a multi-homed firewall just by adding a third interface."

A is correct internal external & DMZ

I believe the point CEH is trying to make is that data has only path to follow in a dual-homed firewall whereas multi-homed has at least 2 paths thus a total of 3 connections are required at minimum.

A multihomed firewall typically has at least two network connections: one facing the internal network and one facing the external network (Internet). The firewall acts as an intermediary between these networks, providing security by filtering and controlling the traffic that passes between them.

in page 1492, the official courseware says a multihomed firewall has more than 3 network interfaces. so the answer cannot be 3 because it has 3 NICs, however the question was asking how many network connections can it make. in the same paragraph of page 1491, it says it can make 2 or more connections. so the minimum is 2. therefore answer should be 2.

Minimum

pg 1491 The multi-homed firewall has more than three interfaces that allow for further subdividing the systems based on the specific security objectives of the organization. thus A

the minimun is 2

According to the courseware, page 1490, 2 or more is multi-homed

Multi-homed Firewall A firewall with two or more interfaces is present that allows further subdivision of the network based on the specific security objectives of the organization. (P.1490/1474)

D checked in the ceh book

Dual-homed = 2 Multi-homed = 3 or more

CEH Material - A multi-homed firewall is a node with multiple NICs that connects to two or more networks. It connects each interface to separate network segments logically and physically.

The answer should be 3. For a second forget about multihomed and just think of a regular FW. How many connection a regular FW has? 2, One for LAN and one for WAN (internet). One connection comes in to the FW and one goes out from FW to LAN. Now lets say that FW can support at least 2 LANs. Then how many Minimal connections needed? The answer is 3. One that comes in and two that goes out to each supported LAN.

I believe the answer should be 3, as it asks how many "Connections" not firewalls or interfaces. If you look at page 1490 it shows LAN<-->Firewall<-->DMZ<-->Firewall<-->WAN Now while yes you can logical do this one one firewall I am taking CEH material here and this would show you would need for a multi-homed setup 2 firewalls 3 Connections (LAN, DMZ and WAN) 7 interfaces + 1 to your router for WAN I do think the question is a little vague, but I would say CEH best practice is to ALWAYS use DMZ and therefore 3 will be the right answer

From CEHv11 Material - Page 1474 Multi-homed Firewall In this case, a firewall with **two** or more interfaces is present that allows further subdivision of the network based on the specific security objectives of the organization